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...information maintainer, has a list of its account holders that also have 
accounts with a portal and have agreed to link their portal account and 
user account with the financial institution or other information 
maintainer . when a user logs onto the user's portal account,, the portal 

server can request information from the user account over a trusted 
link to the financial institution or other information maintainer . 
The portal can request data for a particular user over the trusted link 
or can request bulk data for all users... 

...preferred embodiment, the actions allowed on a user account by the 
portal authentication data are more restrictive than the actions allowed 
by the user authentication data. As an example, a brokerage house might 
allow the portal to read recent transaction data for the user but not 
to make trades on the user's account, while the brokerage house would 
allow the user to perform many more actions if the user Togged on directly 
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Bank One Secures EMail, Drops PKI 

(Bank One building new e-mail system with Xpedite; e-mail operation to not 
use public key infrastructure (PKI) technology; system to be outsourced 
to Xpedite) 

Bank Technology News, p 38+ 
July 2000 

DOCUMENT TYPE: Journal ISSN: 1060-3506 (united States) 
LANGUAGE: English RECORD TYPE: Full text 
WORD COUNT: 885 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

TEXT : 

...its customers had 128-bit encryption," says Marion Bartholomew, director 
of strategic analysis at xpedite. Customers won't have to implement 
anything with Bank one's email service.". 

Customers receive an email from Bank One in one of two ways: notify 
and retrieve, or complete push delivery, with the former, Bank One simply 
notifies patrons they have account information waiting for them at a 
secure web site . with the latter, the bank sends the data to end users 

as an encrypted file. "The system is a one-way flow," Goodman says, "we're 



...can provide this verification rapidly and confidentially, he adds. 

Although he likes the product's " multi -layer approach" of using 
passwords , authentication and encryption, "There's still the question of 
now 'guessable' the pass phrase is," Christiansen... 
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INTERNET INVESTMENTS: ASSET MANAGERS READY WEB INITIATIVES TO REACH B-TO-B 
CUSTOMERS 

(Many asset management firms, including Putnam institutional, to roll out 

enhanced internet sites geared toward institutional investors) 
Business Marketing, p 1 
October 01, 1999 

DOCUMENT TYPE: Journal ISSN: 0745-5933 (United States) 
LANGUAGE: English RECORD TYPE: Full text 
WORD COUNT: 1288 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

TEXT: 

...new institutional web site with features such as streaming video and 
audio content within the next year. The venue will include a password 
-protected private link that will allow Putnam to communicate with its 
institutional clients, said Jane wolfson, senior VP-institutional and 
defined. . . 

...other asset managers think the best way to market themselves over the 
internet to institutional investors is by building up site 
functionality. For example. New York-based Deutsche Banc Alex. Brown 
within the next quarter will introduce an internet feature that allows 
institutional investors . . . 
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Safeguarding customer information: The key to customer trust 
Stern, Marta 

ABA Bank Compliance v22nll PP: 30-39 Nov/Dec 2001 
ISSN : 0887-0187 JRNL CODE: BCP 
WORD COUNT: 5220 

...text: operations and which systems may be disconnected as a precaution. 
as a part of the bank 's initial response, the IT officer should review 
all user logs and comments for suspicious network events and all reports 
from third-party providers about... 

...the intrusion and the intruder's means of entry must be guided by the 
circumstances. Authentication compromises (e.g., revealed passwords ) 
across multiple systems, along with other types of compromises, must be 
addressed as soon as they are... 

...law enforcement. System restoration involves a variety of tools and 
techniques. Trusted copies of the bank 's web site , IT and other 
operating systems, customer NPPI, and essential bank data are 
requisites for restoring systems to their pre-intrusion status and bringing 
them back. . . 
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02197185 75532135 

The future of wholesale banking: The portal 

Fonseca, Isabella; Hickman, Meredith; Marenzi , Octavio 
Commercial Lending Review vl6n3 PP: 23-35 Summer 2001 
ISSN: 0886-8204 JRNL CODE: CLV 
WORD COUNT: 6132 

...TEXT: and outside partners to communicate via an extranet. Given the 
success of this internal initiative, banks began to provide portal 
offerings to their customers . 

internet portals , such as Yahoo!, have existed for several years. These 
web sites have had an enormous success as gateways to numerous sources of 
information, while consumers might... 

...Microsoft MoneyCentral useful tools for locating financial information 
or reviewing financial products and services, business customers have 
more complex needs. 

internet portals designed specifically for business clients are still in 
their infancy. Most financial institutions are focused on buildin3 cash 
management solutions to enable clients to perform many of their basic 
banking needs online. A number of banks have taken a small step toward 
becoming a portal by adding news feeds and content... 

...influx in the number of financial institutions examining and deploying 
business-to-business (b2b) web portals for the following reasons: 

* the need for banks to offer customers anytime, anywhere access to 
self-service banking and nonbanking options; 
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* security advancements in internetbased services... 
. . .services. 

in the future, banks' wholesale e-banking offerings will develop into the 
kind of " portal " that will provide a single entry point for corporate 
customers to access the bank 's array of financial services, as well as a 
host of new, value-added services... 

...a variety of products, services, and business information, in their most 
basic form, internet banking portals allow a bank 's business customers 
to have easy access to a number of banking and nonbanking products and 
services anytime, anywhere, with nothing more than a browser. The portal 
becomes a central access point to important information from different 
sources, internet banking portals give customers the ability to manage 
daily business activities and evaluate other products and services, all 
from. . .supplies from sellers (suppliers) by accessing electronic catalogs 
through the bank's web site or portal . Tnis service allows businesses to 
increase productivity while reducing costs. Business customers benefit 
from having more control over the purchasing process from requisition 
through order fulfillment and... 

...by product, inventory tracking, and order tracking. It is a high-value 
service, which enables customers to choose from a variety of suppliers at 
precontracted pricing. 

For banks , offering e-procurement services is another way to enrich the 
customers 1 portfolio of offerings. The institution will become the 
intermediary between the buyer and the seller... 

...longer have to print and mail the bills. Payors are able to control 
their disbursements. Banks benefit from an additional revenue stream and 
from their business customers ' extended visits to the site , an 
opportunity to cross-sell other products and services. Although there is a 
revolutionary potential ... prefer a log-in screen that displays the 
company's cash balance and positions. 

Corporate customer level. Eventually, we believe that financial 
institutions may create the ultimate portal , personalizing users ' 
experiences across all customer segments. Through the deployment of 
extensive and advanced technologies, financial institutions may create 
a unique experience for retail customers , small-business customers , or 
customers that operate in a certain industry-all using the same underlying 
infrastructure but personalized to their profile settings. Today, different 

portals are being created to target different customer segments and 
even certain business needs (for example, procurement portals ). 
ultimately, financial institutions will reach a point where they are 
able to create profiles to target each customer... 

...or signs up for a particular product, banks should be able to track 
purchasing behavior. Portals are a perfect channel for banks to 
implement customer acquisition strategies and optimize customer 
retention, because they give customers access to a variety of products 
and services in one place. Banks may decide to implement campaign 
management tools to automate this process and send targeted offers via 
electronic channels, when a customer visits a bank ^s portal , an 
e-mail message or a personalized promotion may appear on the screen 
offering additional services relevant to the customer 's purchase. 
Targeted marketing is important to maintain the bank 's image and the 
consistency of messages to the audience. These e-messages are also a 
cost-effective advertising tool for the bank . Banks know their 
customers shop around, so it is to their benefit to send targeted 
promotions to them. If the bank maintains the communication with the 
customer , there will be a stronger relationship. 
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CONSISTENT LOOK AND FEEL 
Achieving a consistent look and... 

...internet products and services should have a similar look and feel, 
making it easy for users to locate information quickly as they navigate 
through the site . Financial institutions should organize a design 

?roup to develop a template and manual on designing applications and sites 
or each group within the bank to follow. They may choose to color-code 
applications. For example, perhaps customer service inquiries are always 
found as yellow links, cash management products with green links, etc... 

...page). A consistent look and feel and intuitive navigational paths make 
it considerably easier for customers to use the web sites . 

PORTAL PRODUCTS AND SERVICES 

A well-established and all -encompassing portal provides access to a wide 

...a high-level system architecture for a typical internet banking portal. 
The underlying technologies for portals include application servers, web 
content management, and enterprise application integration. Business 
customers access the bank 's portal using a single user name and 
password. This step verifies authentication and ensures that transaction 
information is secure and confidential. At this point, the business 
customer is presented with a mix of available products and services. 

EXHIBIT 2 

Portal access is not only restricted to a business entity but also to 
users within an organization. So even though the portal offers a range 
of options, access is controlled within the organization. This allows the 
firm to assign certain personnel to specific tasks. For example, a business 

customer using a bank *s portal may allow only the manager of its 
human resources department to access and make changes to the company's 401 
(K) plan. 

EXHIBIT 3 

The bank also provides services through the portal to its business 
customers , such as e-procurement and web hosting, that do not reside on 
the bank 1 s . . . 

...is accessed by the customer. The third party does not know the identity 
of the customer , however, and reports this data to the bank for further 
analysis. Outside service offerings need to be integrated with the bank 's 
core processing systems, in addition, business customers also have 
interfaces that carry data to and from their own back-office systems. These 
interfaces for both the bank and its business customers can either be 
built into the various solutions (for example, procurement) or can be 
customized to the client 's needs. 

Early adopter banks have taken the approach of managing and operating the 
content of some of the new. . . 

...for the suppliers and provides a standard look and feel. For 
supplier-managed content, business customers access product information 
directly from the supplier's Web site . These catalogs may not provide the 
same look and feel throughout product lines. This shows how the bank 
remains as a gateway between the buyers (business customers ) and 
sellers (suppliers). 

For other more traditional banking services, such as cash management, the 
bank... 
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...for vendor-provided solutions to implement in a shorter time frame. 

BENEFITS AND CHALLENGES OF PORTALS 

Benefits for Business Customers 

Single sign-on. Typically, business customers are required to log onto 
multiple screens on the bank 1 s Web site to access their products and 
services. Each system (for example, bill payment, personalized content, 
credit card account) frequently has its own administration (and therefore 
different user names and passwords), leading to a number of separate web 
sites for the various lines of business, with the emergence of advanced 
and integrated portals , users may have direct access to different 
applications based on their user authorization, through one single 
access point . information from diverse systems is available in real 
time. 

EXHIBIT 4 

24/7 self-service. . . 

...e-mail management, online chat sessions, web collaboration, or 
voice-over IP (voip) technology enable financial institutions to serve 
customers efficiently via the internet. 

Personalization. Portals provide customized navigation to customers by 
gathering data about them and targeting the best product and service 
options. Additional resources... 

...individuals based on their role at the organization and the level of 
relationship with the bank . Through internet banking portals , business 
customers are able to access personalized information relevant to their 
needs, regardless of the source. 

Real ... 

...fees as they play the role of an intermediary between third-party 
product providers and customers purchasing products via the bank ' s web 
site . Providing access to multiple personalized products and services 
through a single access point will build customer loyalty and create 
opportunities for cross-selling activities. 

Lower costs, internet banking portals enable 24/7 access to information 
for customers , reducing administrative costs for the bank and providing 
faster and convenient customer service, with the single sign-on 
capability, there is no need to build access control... 

...small-business market, from cash-management services to fulfilling 
business-related needs such as leasing. 

Customer retention and relationship expansion, internet banking portals 
may be one of the best ways to retain and expand customer relationships. 
Portals allow financial institutions to cross-sell based on a unified 
view of the customer . as customers use more services, the firm will 
have a better financial picture of its customers and will be better able to 
serve them. Also, the more services a customer has with the bank , the 
higher the chances that the customer will remain loyal. Shifting numerous 
financial relationships is burdensome, while most midsize to large 
corporate clients prefer to adopt best-of-breed products and services, 
integrated portals position financial institutions to provide 
additional services conveniently. 

CHALLENGES FOR FINANCIAL INSTITUTIONS 

internet banking portals are still in their early stages. Financial 
institutions face a number of issues when providing internet banking 
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portal services, including security, integration, multichannel delivery, 
and design of the user interface. 

Security. Security is a major concern for banks . in a portal 
environment, a bank needs to address various levels of security. First, a 
portal needs to authenticate the user . This is usually done using 
digital certificates issued by a third party or by the... 

...be stored on devices such as smart cards or hard drives and accessed via 
a personal identification number or any other identification method, 
such as biometrics. 

The next level is to allow the appropriate user to access the system. 
This means that specific users, groups, and members... 
...form of communication between firms are encrypted, providing a secure 
method of data transmission and authentication of the data and server. 
Several encryption schemes may be used, such as SSL (Secure Sockets Layer) 
and DES (Data Encryption... 

...safe authentication for some business transactions. 

Integration, integrating all the core processing systems of a bank with 
the portal solution, including customer information files, external 
data feeds, and customer service databases, is challenging and 
time-consuming for the bank . However, this is necessary for a successful 
portal strategy. For services such as e-procurement . . . 

...States is small. By the end of the year 2001, we expect 20% of leading 
banks in the US. will offer advanced Internet portals to their corporate 

customers . These portals will allow a single sign-on for corporate 
customers to access banking and business services. That number is 
expected to climb to 40% by 2003. Exhibit 5 shows the percentage of U.S. 
banks offering internet portals to their customers . 

Spending 

The cost of implementing a portal solution varies widely from one 
institution to another. This variation is determined by the type... 

...Exhibit 7 depicts the estimated percentage breakdown of costs for portal 
development. 

Revenues 

Although generic portals have been around for the past few years, portal 
offerings to corporate customers did not become a popular service until 
mid-1999. Banks have rushed to enter this space and have been testing 
results as they go. Revenues... 

...of the top 100 US. banks, we identified a number of early adopters 
offering internet portals to their business customers . Each provides a 
different set of services to customers . Most of these banks are focused 
on delivering portal technology through the Internet but are in various 
stages of deployment. The goal for these... 

...few banks, however, are initiating steps to provide an initial basic 
wireless service to business customers . 

Early internet wholesale banking portal providers include Chase Manhattan 

Bank , Citigroup, wells Fargo, PNC Bank, and KeyBank. Exhibit 9 lists the 
portal strategies of these... 

. . .nonbanking services. Standing out from these leaders is wells Fargo, 
which announced a financial services portal (Commercial Electronic 
Office) for its midsize to large business customers . This portal allows 

clients to access banking and nonbanking products through a single 
sign-oh . 
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FUTURE TRENDS 
The largest... . 

...portal users will increase between 2000 and 2003 from 300,000 to 6.4 
million users . We define portal users as business customers that 
use two or more services from the bank ' s portal . Exhibit 10 depicts the 
total number of business portal users in the US. 

we expect to see the following trends over the next 12 months... 

...and increased personalization functions are necessary for banks that 
want to be successful in their portal strategy. The challenge for the 
bank will be to take the customer from the initial stages of product 
orientation to the purchase and usage stages. 

Financial institutions must improve self-sales and service on their portal 
sites . Portals will become the onestop site for business customers 
to perform daily operations. Banks should consider online customer 
service technologies such as online chat, web collaboration, or VoIP. 

The adoption of wireless devices... 



15/3 ,K/5 (Item 3 from file: 15) 
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02129805 69225779 

vpns enhance data communications & security 

Esser, Julie 

Credit Union Magazine v67n3 PP: 48 Mar 2001 
ISSN: 0011-1066 JRNL CODE: CUG 
WORD COUNT: 708 

...TEXT: software that's loaded on remote computers. On average, remote 
access vpns can save a credit union 60% to 80% of its remote user 
costs. A credit union can implement a site -to-- site VPN, a 
remote-access VPN, or a combination. 

To make sure your data is secure... 

...MD5 (message digest version 5) and SHA-1 (secure hash algorithm), 
protects data during transmission. 

* Authentication' . iPSec allows for both single-factor and two -factor 
authentication systems. Single-- factor authentication relies on items 
the user knows, such as a password . Two — factor authentication 
includes something the user knows and something the user possesses. An 
example of two -factor authentication could be an automated teller 
machine card (something they possess) and the personal identification 
number (something they know). Two -factor authentication systems are 
considered more secure but also more complex and difficult to manage. 

IPSec can. . . 
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02022452 53813451 

Making remote access decisions 

Delande, Jim 
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Telecommunications v34n5 PP: 78-84 May 2000 
ISSN: 0278-4831 JRNL CODE: TEC 
WORD COUNT: 2128 

...TEXT: reduces connect-time charges is to select an experienced service 
provider that has expansive local access point coverage that enables 
traveling users , telecommuters and day extenders who live beyond the 
modem bank 's local calling area to connect remotely via a local call, 
where no local access... 

...area coverage is Primary Rate ISDN (PRn aggregation. 

PRI aggregation is a method of assigning more than one local access 
number or rotary to one or more PRI circuits. This differs from the 
traditional buildout model... 

...PRI port oh a NAS.) Using PRI aggregation, a single PRI is able to 
service more than one rotary or more than one local access area. 
This allows service providers to simplify the provisioning process by 
better utilizing existing and future POP hardware... 
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01908310 05-59302 

Customer relationship management: New horizons for institutional banking 

Singh, Arvind 

US Banker vl09nl0 PP: 79-82 Oct 1999 
ISSN : 0148-8848 JRNL CODE: USI 
WORD COUNT: 1458 

...TEXT: function fairly efficiently and enable the. cost-effective internal 
dissemination and communication of information. Currently, banks are 
allowing clients to access their internal web sites for daily 
market-related commentaries, forecasts and prognostications. Although a 
step forward, this process remains strategically incomplete. The 
information offered, though interesting, is rarely original or compelling. 
Customers are not drawn to the site with the frequency and urgency 
desired by the banks. This form of interaction is rarely a direct 
contributor in furthering the targeted business objectives of the bank . 

So banks need to extend their technology to their valued customers by 
granting access to information via the creation of extranets. Sufficient 
security exists in Internet communications via encryption or password 
authentication that this would be a natural next step. The customer 
could access the bank Web site to track the status of pending 
transactions, instantaneously determine credit-line availability and view 
upcoming ... 
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01496669 01-47657 

Real jobs: Assisting students and industry with a resume and job posting 
service 

Miller, Norman G 

Journal of Real Estate Literature v5n2 PP: 203-209 Jul 1997 
ISSN: 0927-7544 JRNL CODE: JREL 
WORD COUNT: 1887 

...TEXT: www.real-jobs.com. 
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Motivation for a separate commercial real estate resume and job data bank 

with most web searches today, users are quickly overwhelmed with the 
number of web sites that match their keyword description of whatever they 
seek. Type in "real estate jobs," and. . .months from tne last time the 
original user edits the listing. Each user name and password will support 
only one resume listing, but multiple passwords will allow a user to 
post more than one resume. Employer passwords will support multiple 
job listings based on simple identification codes provided to the employer 
at the time of. . . 



15/3, K/9 (Item 7 from file: 15) 

DIALOG (R) File 15 :ABl/lnform(R) 

(c) 2007 ProQuest info&Learning. All rts. reserv. 

01233439 98-82834 

Stock, mutual fund trading hits the Internet 

Reinbach, A 

Bank Systems & Technology v33n6 PP: 38 Dun 1996 
ISSN : 1045-9472 JRNL CODE: BSE 
WORD COUNT: 580 

...TEXT: acquired in a $50 million transaction by Columbus, OH-based 
CheckFree Corp. 

The pawws web site is essentially a shopping mall linked to their client 
' s mainframes, in which various companies offer products, says Security apl 
vp Jamie waller. Financial... 

...communications link, since PAWWS operates the site. Waller declined to 
disclose fee structures for the financial institutions . 

Through PATH On-Line, investors can access thousands of mutual funds in 
Jack white & Co.'s Mutual fund Network, including... 

...to open accounts in a company office, register a signature on paper, 
receive a specific authorization code for the customer to use at the web 
site, and two customer-specified passwords -one to access the account, 
another to trade with it. withdrawals, he adds, require hard... 

15/3, K/10 (Item 1 from file: 610) 
DIALOG (r) Fi 1 e 610: Business wire 
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00571870 20010814226B2638 (USE FORMAT 7 FOR FULLTEXT) 

ing Aetna Financial Services One of the First to Launch Yodlee's 
Next-Generation Account Aggregation Service-New Service Provides Customers 
with Secure, One-Click Access to All Their Personal Accounts for True 
Personal wealth Management 
Business wire 

Tuesday, August 14, 2001 08:10 EDT 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 695 

. . . cards , bi 1 1 s , travel 

reservations and rewards, investment accounts, shopping, news, 
email, and much more -- from multiple providers on a single 
page with one, secure password . 
— Auto- Login -- allows users to access password-protected 

sites 

without having to enter a username and password each time. 
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Personal Dashboard -- provides users an... 

. . . thei r total net 

worth and chart historical and cross account activities, such 
as changes in bank balances, investment accounts calculations 
all at their fingertips. 
-- Transaction-Level Detail -- enables users to view detailed, 

transaction-level information for specific accounts. 
About Yodlee 

Yodlee is the pioneer... 
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Netegrity Expands Leadership in Asia Pacific 
PR Newswi re 

Wednesday, April 18, 2001 08:14 EDT 

JOURNAL CODE: PR LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
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. . .Netegrity ' s 

solution for managing user access to e-business Web sites. siteMinder 
fully 

supports multi -byte characters for user login , registration, password 
changes, 

authentication , and authorization . This enables companies and their 
users to 

log on to the site in their native... 
...of software solutions for 

securely managing e-business. Companies use Netegrity 1 s products to 
control 

user access to e-business Web sites , to seamlessly create 
e-partnerships , and 

to secure business-to-business transactions. Netegrity enables customers.... 
... its vast network 

of partners, Netegrity is securely managing e-business solutions for over 
300 

customers worldwide including Aetna, American Express, Bank One, 
Commerce One, 

E*TRADE, General Electric, i2 Technologies, Ingram Micro, and Wells Fargo. 
The... 
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vasco Expands Dominance in Online Banking Security Market with signing of 
istrobanka in Slovakia 

PR Newswi re 

Tuesday, October 17, 2000 02:00 EDT 
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DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 829 

...PC dial-in, or e-mail -- for true anytime, 

anywhere, anyhow banking. Digipass security also allows the bank to 
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strictly 

control account access, with a dynamic password and two -factor 
authentication 

to strongly authenticate customers and a digital signature to verify the 
authenticity of information and... 

...end-to-end security through true Single Sign-On, access control and 
advanced 

entitlements, web portal security, strong user authentication, and pki 
enablement, while sharply reducing the time and effort required to deploy 
and 

manage security. VASCO's customers include hundreds of financial 

institutions , blue-chip corporations, and government agencies in more 
than 50 

countries, among them John Hancock... 
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Encommerce Getaccess(TM) Supports IBM Aix(TM) 4.3.3 Platform And New IBM 
Copper Servers 

PR Newswi re 

Thursday, May 11, 2000 16:21 EDT 

JOURNAL CODE: PR LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 1,050 

...strategic fit for the RS/6000 systems and the AIX platform for 
the following reasons: 

— Multi -Domain web single sign-on, Personalization allows users 
to log 

on once to access a personalized navigational "menu" to all information 
and 

resources, including multiple affiliate... 
...a proven track record, encommerce 

services expedite the successful deployment of global enterprise and 
consumer 

portals . Global 2000 customers include The Chase Manhattan Bank , 
Bank of 

America, visa International, Egg, Nomura International, The Prudential 
insurance Company of America, 3Com, Canon... 
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Encommerce Works with IBM to Securely Manage Global Ebusiness Relationships 

PR Newswi re 

Monday, April 24, 2000 16:38 EDT 

JOURNAL CODE: PR LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 963 

...solution is a fit for IBM's eBusiness target market for the following 
reasons: 

-- Personalization, Multi -Domain web single sign-on -- allows users 
to log 
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on once to access a personalized navigational "menu" to all 
information 

and resources, including multiple affiliate... 
. . .a proven track 

record, enCommerce services expedite the successful deployment of global 
enterprise and consumer portals . Global 2000 customers include The 
Chase 

Manhattan Bank , Bank of America, visa International, Egg, Nomura 
international, The Prudential insurance Company of America, 3Com, Ericsson 
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00880254 

CON ED OFFERS INTERNET BILL PAYMENT; LETS BIG USERS SEE MULTIPLE ACCOUNTS 
Energy Services & Telecom Report (formerly DSR) , Vol. 16, no. 33, Pg 11 
August 14, 1997 
JOURNAL CODE: DSR 

SECTION HEADING: The Internet ISSN: 1286-4008/96 
WORD COUNT: 274 

TEXT: 

...a checking account or any other account with check-writing privileges. 

To use the service, customers enter con Ed's web site 
(http://www.coned.com) and click on the on the Customer Service 
On-Line 11 button on the home page . The customer is prompted to enter 
a Con Ed account number, and a "Make a Payment 1 1 option... 

... page appears, showing the customer's account balance and a "Pay by 
internet' 1 option; then users fill out an "electronic check, 1 1 providing 
the account number and bank identification number. All information is 
encrypted to maintain security, Con Ed says, 
in addition, customers... 

... has started an internet site called "Corporate Customer information 1 1 
(http://www.coned.com/cag). This " password -protected' 1 site allows big 
customers, with multiple facilities, to view all of their accounts 
together. This is especially valuable to New York... 



15/3, K/16 (Item 1 from file: 268) 
DIALOG(R) Fi 1 e 268: Banking Info Source 
(c) 2007 ProQuest info&Learning . All rts. reserv. 

00405323 84177585 (USE FORMAT 7 OR 9 FOR FULLTEXT) 

Making aggregation work 

Marty, Diane 

independent Banker, v51, nlO, p60-63, Oct 2001 DOCUMENT type: Periodical; 
Feature LANGUAGE: English RECORD TYPE: Fulltext 
WORD COUNT: 1,404 

(USE FORMAT 7 OR 9 FOR FULLTEXT) 

these concerns most directly impact the communication between the 
aggregation service provider and the end user , these points can help 
banks evaluate the privacy policies of these providers. A single visit to 
a potential provider s Web site should reveal: 

* whether the privacy policy is one click away for clients ; 

* Is written in customer-friendly language; and 

* Cautions consumers to refer to the policies of .. .visitors . 



Page 12 21-Jun-07 



Robert Finley 

* Maintain separate physical locations for the development, quality 
assurance and production operating environments. 

* Require multi -factor authentication before permitting remote 
access . 

* use a password reset mechanism-- and dp not display decrypted 
passwords to tech-support personnel -for customer support of forgotten 
passwords . 

* For entrance into sensitive production operations, require multiple 
persons with different levels of privilege . 

* Implement standard operating procedures in response to any 
compromises in security. 

* in systems storing confidential... 
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00040402 

SMART CARD QUARTERLY 
EFT REPORT 

March 11, 1998 VOL: 21 ISSUE: 5 DOCUMENT TYPE: NEWSLETTER 

PUBLISHER: PHILLIPS BUSINESS INFORMATION 

LANGUAGE: ENGLISH WORD COUNT: 3426 RECORD TYPE: FULLTEXT 

(c) PHILLIPS PUBLISHING INTERNATIONAL All RtS. Reserv. 

TEXT: . 

...Delhi-based Smart Chip Limited. 

The unique application especially is suited for Indian 
conditions because customers expect service at site -- whether office 
or home, says Sanjeev Shriya, managing director of Smart Chip. 

Such a concept .. .1974 

Contact: Howard Mandelbaum, director of smart cards 
Employees: 976 

Revenue: $197 million in 1997 
Customers : American Express [AXP] , Bank of America [BAC] , wells 
Fargo [WFC] 

Products: Credit and debit card terminals; portable terminals 
restaurant credit, debit and smart card processing systems; card 
loyalty tracking system; smart card PIN pads; multi -service 
switch/routers that facilitate the integration of local area network, 
voice, fax video and... data using client/server-based 
technology," Pascuito claims, adding that the TPll's open architecture 

allows it to interface with multiple operating systems, tpii sells 
for between $150,000 and $1 million. . 

More banks are implementing client /server technology. "Legacy 
and mainframe-based systems are being phased out, and are being 
replaced. . . 
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09153230 Supplier Number: 79780497 (USE FORMAT 7 FOR FULLTEXT) 
FXall Chooses Netegrity's SiteMinder Platform for Secure Transaction 
Management. 

PR Newswire, p2063 
Nov 6, 2001 

Language: English Record Type: Full text 
Document Type: Newswire; Trade 
Word Count: 946 

authentication 

methods depending on the sensitivity of the application. SiteMinder 
supports a wide range of authentication methods including 
passwords , 

certificates, and tokens, and also combinations of these methods. 
Multi -level user delegation- using DMS, FXall is able to 
delegate user 

administration to their end... 

...software solutions for securely managing e-business relationships. 
Companies use Netegrity's products to control user access to e-business 
web sites , to seamlessly create e- partnerships, and to secure 
business-to-business transactions. Netegrity enables customers... 

...its vast network of partners, Netegrity is securely managing e-business 
solutions for over 480 customers worldwide including Aetna, American 
Express, Bank One, e*trade, General Electric, Ingram Micro, and wells 
Fargo. The Company was the only... 
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Cygnifi Taps Saecos for Top-Notch Security . (Company Business and Marketing) 

McEachern, Cristina 

wall Street & Technology, vl9, n6, p33 
June, 2001 

Language: English Record Type: Fulltext 
Document Type: Magazine/Journal; Trade 
word Count: 1349 

with a single sign-on. But Cygnifi also provides services through 
third parties and their portals and needed to make sure that some users 
did not need to re-authenticate during their sessions, with the Saecos 
engine the users identity is automatically re-authenticated at each 
application for security throughout the session. "If a user signs onto a 
bank ' s portal , then they click through to the Cygnifi service and 
there's a behind-the-scenes authentication of that person to Cygnifi so 
they don't have to log in again," says DeAddio. 

The next component necessary to the security of Cygnifi 's site and 
services was an authorization product. "After the user is authenticated, 
the next step is to say what this user can do," says De Leon. For the 
authorization. . . 

...and authorize along that network of connections?" asks De Leon. "Saecos 
supports what we call multi -tiered e-relationshi ps . " 

At this point, the administration function or the authentication 
and authorization of end users is performed through Cygnifi, but Saecos is 
in the process ... 
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Netegrity Expands Leadership in Asia Pacific 
PR Newswi re, pNA 
April 18, 2001 

Language: English Record Type: Full text 
Document Type: Newswire; Trade 
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Netegrity's solution for managing user access to e-business web 
sites. SiteMinder fully supports multi -byte characters for user login , 
registration, password changes, authentication , and authorization . 
This enables companies and their users to log on to the site in their 
native ... 

...of software solutions for securely managing e-business. Companies use 
Netegrity's products to control user access to e-business web sites , to 
seamlessly create e-partnerships, and to secure business-to-business 
transactions. Netegrity enables customers .. . 

...its vast network of partners, Netegrity is securely managing e-business 
solutions for over 300 customers worldwide including Aetna, American 
Express, Bank One, commerce One, E*TRADE, General Electric, i2 
Technologies, Ingram Micro, and. wells Fargo. The... 
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eTrue Launches First Biometric internet Service with NASA As Its First 
Customer. 

Business Wire, p2122 
Jan 2, 2001 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
word Count: 682 

announced soon . 

The eTrue internet outsourcing service authenticates users for both 
web and local network logon through multiple biometrics, such as face 
and fingerprint verification, providing 100% user authentication . The 
award winning service is hosted by Exodus Communications and eTrue manages 
the service, 7 X 24, for its customers . 

eTrue's biometric logon to websites and networks benefits 
enterprises such as banks , securities brokers, insurance companies, 
hospitals and government agencies that only want trusted users to access 
high value transactions and data. Unlike passwords, unregistered users will 
think twice before... 
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Opportunities in the world of e-payments. 

O'Brien, Tony 

Cards international, pl2 

Oct 12, 2000 

Language: English Record Type: Fulltext 
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word Count: 1648 

IC) cards are likely to close the gap on magnetic strip credit 
cards in the next decade, as new technologies facilitate PIN -based and 
chip-based authorisation for transactions. 

Chip-based cards are already crucial as identification devices in 
pay-per-view. . .be tracked through electronic networks. 

Similarly, companies use technology to offer aggregated information 
from merchant websites to make it easier for users to find what they 
want online. 

Banks traditionally have dominated the payments market but they 
have seen their presence in the payments... 
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encommerce Works with IBM to Securely Manage Global eBusiness 
Relationships. 

PR Newswi re, p4052 
April 24, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswi re; Trade 
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solution is a fit for IBM's eBusiness target market for the 
following reasons: 

-- Personalization, Multi -Domain Web single sign-on allows 
users to log 

on once to access a personalized navigational "menu" to all 
information 

and resources, including multiple affiliate... 

...a proven track record, encommerce services expedite the successful 
deployment of global enterprise and consumer portals . Global 2000 
customers include The Chase Manhattan Bank , Bank of America, visa 
international, Egg, Nomura international, The Prudential insurance Company 
of America, 3Com, Ericsson... 
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Organisations seeking effective and affordable remote access 
security can now choose an integrated solution from two market leaders." 

Shiva Access Manager is a remote access authentication , 
authorisation and accounting solution for windows NT or UNIX platforms, 
and supports both RADIUS and TACACS... 

...of remote access security for corporate networks. VASCO's Digipass is a 
family of strong authentication and digital signature devices that 
replace vulnerable static passwords with strong, two -factor 
authentication security, providing a much higher level of protection for 
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corporate networks, with millions of users... 

...end-to-end security through true Single Sign-On, access control and 
advanced entitlements, web portal security, strong user authentication, 
and PKI enablement, while sharply reducing the time and effort required to 
deploy and manage security. VASCO's customers include hundreds of 
financial institutions , blue-chip corporations, and government agencies 
in more than 50 countries, among them ABN AMRO... 

15/3 ,K/8 (Item 8 from file: 16) 
DIALOG (R) File 16: Gale Group PROMT(r) 
(c) 2007 The Gale Group. All rts. reserv. 

07914258 Supplier Number: 66142955 (USE FORMAT 7 FOR FULLTEXT) 
VASCO EXPANDS DOMINANCE IN ONLINE BANKING SECURITY MARKET WITH SIGNING OF 
ISTROBANKA IN SLOVAKIA. 

PR Newswire, p8967 
Oct 17, 2000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
word Count: 757 

... PC dial-in, or e-mail for true anytime, anywhere, anyhow 
banking. Digipass security also allows the bank to strictly control 
account access, with a dynamic password and two -factor authentication 
to strongly authenticate customers and a digital signature to verify the 
authenticity of information and... 

...end-to-end security through true Single Sign-On, access control and 
advanced entitlements, web portal security, strong user authentication, 
and PKI enablement, while sharply reducing the time and effort required to 
deploy and manage security. VASCO's customers include hundreds of 
financial institutions , blue-chip corporations, and government agencies 
in more than 50 countries, among them John Hancock... 
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07765675 Supplier Number: 64455292 (USE FORMAT 7 FOR FULLTEXT) 
Bank-One Secures EMail, Drops PKI. (Company Business and Marketing) 
Bruno, Maria 

Bank Technology News, vl4, n7, p25 
July, 2000 

Language: English Record Type: Fulltext 
Document Type: Magazine/Journal; Trade 
Word Count: 908 

its customers had 128-bit encryption," says Marion Bartholomew, 
director of strategic analysis at xpedite. " Customers won't have to 
implement anything with Bank One's email service." 

Customers receive an email from Bank One in one of two ways: 
notify and retrieve, or complete push delivery, with the former, Bank One 
simply notifies patrons they have account information waiting for them at 
a secure web site, with the latter, the bank sends the data to end users 
as an encrypted file. "The system is a one-way flow," Goodman says, "we're 



...can provide this verification rapidly and confidentially, he adds. 

Although he likes the product's ' multi -layer approach" of using 

Passwords , authentication and encryption, "There's still the question of 
ow 'guessable' the pass phrase is," Christiansen... 
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Making Remote Access Decisions. (Technology information) 
Delande, Dim 

Telecommunications, v34, n5, p78 
May, 2000 

Language: English Record Type: Full text Abstract 
Document Type: Magazine/Journal; Trade 
Word Count: 2117 

reduces connect-time charges is to select an experienced service 
provider that has expansive local access point coverage that enables 
traveling users , telecommuters and day extenders who live beyond the 
modem bank 's local calling area to connect remotely via a local call, 
where no local access... 

...area coverage is Primary Rate ISDN (PRl) aggregation. 

PRI aggregation is a method of assigning more than one local 
access number or rotary to one or more pri circuits. This differs from 
the traditional buildout model... 

...pri port on a NAS.) Using pri aggregation, a single PRI is able to 
service more than one rotary or more than one local access area. 
This allows service providers to simplify the provisioning process by 
better utilizing existing. and future POP hardware... 
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encommerce getAccess(TM) Supports IBM aix(tm) 4.3.3 Platform and New IBM 
Copper Servers. 

PR Newswire, pNA 
May 11, 2000 

Language: English Record Type: Full text 
Document Type: Newswire; Trade 
Word Count: 1046 

strategic fit for the RS/6000 systems and the AIX platform for the 
foil owing reasons : 

— Multi -Domain web single sign-on, Personalization -- allows 
users to log on once to access a personalized navigational "menu" to 
all information and resources, including multiple affiliate... 

...a proven track record, encommerce services expedite the successful 
deployment of global enterprise and consumer portals . Global 2000 
customers include The Chase Manhattan Bank , Bank of America, visa 
international, Egg, Nomura international, The Prudential insurance Company 
of America, 3Com, Canon... 
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A GUIDE TO E-commerce Security . (Technology Tutorial) (Tutorial) 

DESMOND, PAUL 

Software Magazine, vl9, n2, p34 
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Language: English Record Type: Fulltext 
Article Type: Tutorial 

Document Type: Magazine/Journal; General Trade 
word Count: 3793 

with a unique ID. users insert the iKey into the USB port and enter 
a password to be authenticated, a process known as two -factor 
authorization --one factor being the iKey, the other the password . 

Authentication is only half the battle, however. Once a user gains 
access to a Web site... 

...with a balance above a certain threshold may get a different screen when 
accessing the bank 's web site than a user with a smaller account, 
enabling banks to give their larger customers premium services, Blount 
says. 

The product also has a series of application programming interfaces 

(APIS... 
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INTERNET INVESTMENTS: ASSET MANAGERS READY WEB INITIATIVES TO REACH B-TO-B 

CUSTOMERS, 
CLARK, PHILIP 
Business Marketing, pi 
Oct 1, 1999 

Language: English Record Type: Fulltext Abstract 
Document Type: Magazine/Journal; Trade 
word Count: 1330 

new institutional Web site with features such as streaming video 
and audio content within the next year. The venue will include a 
password -protected private link that will allow Putnam to communicate 
with its institutional clients, said Dane wolfson, senior VP-institutional 
and defined. . .other asset managers think the best way to market themselves 
over the internet to institutional investors is by building up site 
functionality. For example, New York-based Deutsche Banc Alex. Brown 
within the next quarter will introduce an internet feature that allows 
institutional investors. . . 
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B^nk Systems + Technology, p38 
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Language: English Record Type: Fulltext 
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word Count: 580 

acquired in a $50 million transaction by Columbus, OH-based 
CheckFree Corp. 

The PAWWS web site is essentially a shopping mall linked to their 
client ' s mainframes, in which various companies offer products, says 
Security apl vp Jamie waller. Financial... 

...communications link, since PAWWS operates the site. Waller declined to 
disclose fee structures for the financial institutions . 
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Through path On-Line, investors can access thousands of mutual funds 
in Jack white & Co.'s Mutual fund Network, including... 

...to open accounts in a company office, register a signature on paper, 
receive a specific authorization code for the customer to use at the Web 
site, and two customer-specified passwords - one to access the account, 
another to trade with it. withdrawals, he adds, require hard... 
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Securid user authentication technology with Motorola 28.8Kbps modem 

News Release, pN/A 
April 1, 1996 

Language: English Record Type: Full text 
Document Type: Magazine/Journal; Trade 
word Count: 601 

(USE FORMAT 7 FOR FULLTEXT) 
TEXT: 

...can easily and securely access a corporate network from their laptop 
computer using Security Dynamics 1 two -factor user authentication, and 
Motorola's high quality V.34 28,8 Kbps modem. The Securid Modem is a multi 
-functional PC-Card modem that combines automated Securid authentication 
with full-featured communications software to secure valuable corporate 
information. Remote users can quickly send... 

...Motorola's advanced modem technology. The Securid Modem also connects to 
leading cellular phones, enabling users to access important business 
information from remote sites where telephone lines are not available. 
The Securid Modem's automated log-in simplifies network. . . 

...authorized users and locking out hackers and would-be trespassers. The 
Securid Modem provides dynamic, two -factor authentication that combines 
something the user knows--a memorized personal identification number 
(PlN)--with something the user possesses--a Securid Modem that generates a 
random access code... 

...authenticate the identity of users accessing networked or stand-alone 
computing resources. The Company's customers include Fortune 500 
companies and financial institutions as well as academic institutions, 
research laboratories, hospitals and federal, state and foreign government 
organizations . . . 
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TEXT) 

IBM and enCommerce agree to provide Global 2000 eBusiness Portal users with 
secure, individualised access to web applications and services. 

M2 Presswire, NA 
May 8, 2000 

LANGUAGE: English RECORD TYPE: Full text 

WORD COUNT: 1068 LINE COUNT:. 00103 

... solution is a fit for IBM's eBusiness target market for the 
following reasons: 

* Personalisation, Multi -Domain web single sign-on - allows 
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users to log on once to access a personalised navigational "menu" to 
all information and resources, including multiple affiliate... 

...a proven track record, enCommerce services expedite the successful 
deployment of global enterprise and consumer portals . Global 2000 
customers include The Chase Manhattan Bank , Bank of America, visa 
international, Egg, Nomura international, The Prudential insurance Company 
of America,. 3Com, Ericsson... 
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ENCOMMERCE: CyberTrust and enCommerce partner to deliver getAccess. 

M2 Presswire, NA 
July 1, 1999 

LANGUAGE: English RECORD TYPE: Full text 

WORD COUNT: 1222 LINE COUNT: 00114 

... to another part of the Web site. Moreover, companies are freed from 
having to manage multiple certificates and passwords for each user. 
getAccess also allows a company to create a personalised view of its 
portal for each user based on... 

...business by dramatically reducing the time and cost of deploying secure 
content on the web. Customers include 3COM, Admini staff, Bank of 
America, Brigham Young University, Chubb Corporation, Marubeni Corporation, 
Mitsubishi Corporation, Montgomery Securities, NationsBank, Nomura... 



15/3, K/18 (Item 3 from file: 148) 
DIALOG(R) Fi 1 e 148:Gale Group Trade & industry DB 
(c)2007 The Gale Group. All rts. reserv. 

11419351 SUPPLIER NUMBER: 56196073 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Customer Relationship Management: New Horizons for Institutional Banking. 
US Banker, ITEM9928401B 
Oct, 1999 

LANGUAGE: English RECORD TYPE: Full text 

WORD COUNT: 1567 LINE COUNT: 00141 

they are the only market participants that are not solely 
profit-driven. The majority of bank fx sales desks do not (encounter 
central banks regularly as customers . 

Strategically Repositioning the Bank 's Products 
The first-mover advantage in financial product innovation has a 
relatively short life... 

...as profitability rapidly erodes due to the speedy development of 
competitive, copycat products. Nevertheless, the bank must view itself as 
an innovative solution provider satisfying customer needs, rather than as 
a product-driven distributor. External parties, too, can only acquire this 



...rate swaps versus forward rate agreements-product choices such as these 
are highly dependent on customer knowledge and prior familiarity, it is 
imperative that the bank develop and project a brand image that conveys 
in-house expertise regarding specific products and... 

...alternative courses of action using the tools available in the 
marketplace. 

Reconfiguring the Nature of Bank / Customer Interactions 
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The rapid speed of telecommunications and the declining cost of 
formerly proprietary market data. . .function fairly efficiently and enable 
the cost-effective internal dissemination and communication of information. 
Currently, banks are allowing clients to access their internal web 
sites for daily market-related commentaries, forecasts and 
prognostications. Although a step forward, this process remains 
strategically incomplete. The information offered, though interesting, is 
rarely original or compelling. Customers are not drawn to the site with 
the frequency and urgency desired by the banks. This form of interaction is 
rarely a direct contributor in furthering the targeted business objectives 
of the bank . 

So banks need to extend their technology to their valued customers 
by granting access to information via the creation of extranets. 
Sufficient security exists in Internet communications via encryption or 
password authentication that this would be a natural next step. The 
customer could access the bank web site to track the status of pending 
transactions, instantaneously determine credit-line availability and view 
upcoming. . . 
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Language: English Record Type: Full text 
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with PC file locations, specifications, 
tolerances and DOS file-management functions. The menu provides for 
several levels of security and passwords . A Level 1 password 

allows 

testing only. Level 2 operators can create test sequences and store 
test data. Level 3 . . . 

...using a DIP test clip 

cabled to the front panel of the Tracker 5000. 

BETA- SITE USERS 

Tracker 5000 beta- site users include a major bank 's service 
organization, a contractor and a small third-party service company. 
All their reactions... 
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Data Sweepers. 
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to produce one consolidated statement. The user accesses the 
information with just one ID and password . The services will also 
aggregate multiple e-mail accounts and sometimes allow customization of 
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news, weather, sports and shopping. 

in a matter of months, Citigroup, CNBC, America. . .services are 
currently being offered free of- charge to consumers. Sponsors foot the 
bill. A financial institution may pay a per- user fee, while a portal 
like AltaVista would have some sort of revenue-sharing model. 

Attracting Consumers Aggregation is "really... 
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... its customers had 128-bit encryption," says Marion Bartholomew, 
director of strategic analysis at Xpedite. " Customers won't have to 
implement anything with Bank One's email service," 

Customers receive an email from Bank One in one of two ways: 
notify and retrieve, or complete push delivery, with the former, Bank One 
simply notifies patrons tney have account information waiting for them at 
a secure Web site, with the latter, the bank sends the data to end users 
as an encrypted file. "The system is a one-way flow," Goodman says, "we're 
...can provide this verification rapidly and confidentially, he adds. 

Although he likes the product's multi -layer approach" of using 

Passwords , authentication and encryption, "There's still the question of 
ow 'guessable' 
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July, 2000, 

Language: English Record Type: Fulltext 
Document Type: Newsletter; Trade 
Word Count: 1634 

1C) cards are likely to close the gap on magnetic stripe credit 
cards in the next decade, as new technologies facilitate PIN -based and 
chip-based authorisation for transactions. 

Chip-based cards are already crucial as identification devices in 
pay-per-view, . .be tracked through electronic networks. 

Similarly, companies use technology to offer aggregated information 
from merchant websites to make it easier for users to find what they 
want online. 

Banks traditionally have dominated the payments market but they 
have seen their presence 
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FXall Chooses Netegrity' s SiteMinder Platform for Secure Transaction 
Management 

PR NEWSWIRE 

November 06, 2001 
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authentication methods depending on the sensitivity of the 
application. SiteMinder supports a wide range of authentication methods 
including passwords , certificates, and tokens, and also combinations of 
these methods. — Multi -level user delegation- using DMS, FXall is able 
to delegate user administration to their end... 

... its vast network of partners, Netegrity is securely managing e-business 
solutions for over 480 customers worldwide including Aetna, American 
Express, Bank One, e*trade, General Electric, Ingram Micro, and wells 
Fargo. The Company was the only... 
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SPECIAL feature: Pioneers in the Banking Industry: RCBC designs business 
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Workflow system. 

Enterprise Banking's five-tiered Cyber Security Measures begin with 
user ID and password , which is assigned to every user. The next step is 
site authentication and certification by Verisign, the leading name in 
Enterprise Trust Services and a proven backbone of state-of-the-art 
technologies. The Verisign seal on the site f s welcome page assures the 
bank s clients of the site 's security, that its infrastructure and 
practices have fail-safe security. 

Also part of the. . . 
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trading partners, ensuring that they are approved to conduct 
business. with Si teMinder ' s support for multiple authentication 
solutions, including digital certificates and passwords , webMethods 
customers will now have a more flexible solution for securing their 
business transactions. "This... 

... its vast network of partners, Netegrity is securely managing e-business 
solutions for over 370 customers worldwide including Aetna, American 
Express, Bank One, Commerce One, e*trade, General Electric, i2 
Technologies, Ingram Micro, and Wells Fargo. The... 
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Netegrity's solution for managing user access to e-business web 
sites. SiteMmder fully supports multi -byte characters for user login , 
registration, password changes, authentication , and authorization . 
This enables companies and their users to log on to the site in their 
native... 

... its vast network of partners, Netegrity is securely managing e-business 
solutions for over 300 customers worldwide including Aetna, American 
Express, Bank One, Commerce One, E*TRADE, General Electric, i2 
Technologies, Ingram Micro, and wells Fargo. The... 
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Netegrity's solution for managing user access to e-business web 
sites. SiteMmder fully supports multi -byte characters for user login , 
registration, password changes, authentication , and authorization . 
This enables companies and their users to log on to the site in their 
native. . . 

... its vast network of partners, Netegrity is securely managing e-business 
solutions for over 300 customers worldwide including Aetna, American 
Express, Bank One, Commerce One, e*trade, General Electric, i2 
Technologies, Ingram Micro, and wells Fargo. The... 
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announced soon . 

The eTrue Internet outsourcing service authenticates users for both 
Web and local network logon through multiple biometrics, such as face 
and fingerprint verification, providing 100% user authentication . The 
award winning service is hosted by Exodus Communications and eTrue manages 
the service, 7 X 24, for its customers . 

eTrue's biometric logon to websites and networks benefits 
enterprises such as banks , securities brokers, insurance companies, 
hospitals and government agencies that only want trusted users to access 
high value transactions and data, unlike passwords, unregistered users will 
think twice before... 
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of remote access security for corporate networks. VASCO's Digipass 
is a family of strong authentication and digital signature devices that 
replace vulnerable static passwords with strong, two -factor 
authentication security, providing a much higher level of protection for 
corporate networks, with millions of users... 

...while sharply reducing the time and effort required to deploy and manage 
security. VASCO 1 s customers include hundreds of financial institutions 
, blue-chip corporations, and government agencies in more than 50 
countries, among them ABN AMRO... 
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PC dial-in, or e-mail — for true anytime, anywhere, anyhow 
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banking. Digipass security also allows the bank to strictly control 
account access, with a dynamic password and two -factor authentication 
to strongly authenticate customers and a digital signature to verify the 
authenticity of information and... 

...while sharply reducing the time and effort required to deploy and manage 
security. VASCO's customers include hundreds of financial institutions 
, blue-chip corporations, and government agencies in more than 50 
countries, among them John Hancock... 
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strategic fit for the RS/6000 systems and the AIX platform for the 
following reasons: 

Multi -Domain web single sign-on, Personalization — allows 
users to log on once to access a personalized navigational "menu" to 
all information and resources, including multiple affiliate... 

...a proven track record, enCommerce services expedite the successful 
deployment of global enterprise and consumer portals . Global 2000 
customers include The Chase Manhattan Bank , Bank of America, visa 
international, Egg, Nomura international, The Prudential insurance Company 
of America, 3Com, Canon... 
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solution is a fit for IBM's eBusiness target market for the 
following reasons: 

* Personalisation, Multi -Domain Web single sign-on - allows 
users to log on once to access a personalised navigational "menu" to 
all information and resources, including multiple affiliate... 

... a proven track record, enCommerce services expedite the successful 
deployment of global enterprise and consumer portals . Global 2000 
customers include The Chase Manhattan Bank , Bank of America, visa 
international, Egg, Nomura international, The Prudential insurance Company 
of America, 3Com, Ericsson... 
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solution is a fit for IBM's eBusiness target market for the 
following reasons: -- Personalization, Multi -Domain web single sign-on 
allows users to log on once to access a personalized navigational 
"menu" to all information and resources, including multiple affiliate... 

... a proven track record, enCommerce services expedite the successful 
deployment of global enterprise and consumer portals . Global 2000 
customers include The Chase Manhattan Bank , Bank of America, visa 
International, Egg, Nomura International, The Prudential Insurance Company 
of America, 3Com, Ericsson... 
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Abstract: Major banks are beginning to choose partners from among the 
emerging web aggregators, while the aggregators are beginning to form 
alliances of their own. Account aggregation services allow customers to 
view key information about bank balances, investments, e-mail and 
frequent flier programs from one integrated web site . Passwords for 
other accounts are entered into the web aggregator's database, saving the 

customer the trouble of having to keep track of multiple logins and 
interfaces. Although some financial institutions initially resisted the 
concept of having an outside agent collect information about their 

customers , they are starting to come to terms with the practice commonly 
known as "screen-scraping". 
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while password protection was designed to make conducting online 
transactions safe for consumers, it has resulted in what some industry 
experts are calling ' password bloat. 1 It has been estimated that an 
average web user has about 30 password -protected accounts, and requests 
to reset forgotten passwords represent 50 percent of all help-desk calls 
to websites , according to RSA Security. The search for alternatives to 
the multi - password annoyance has resulted in few options. Some 
websites use a layered approach that uses other identity-type information. 
For example, by the end of 2006, all federal banking agencies will require 
online banks to ask for two types of identification to access an 
account. Small companies like Siber Systems offer secure 'vaults 1 in which 
passwords can be remembered and managed, but consumers remain worried 
about giving control over their digital... 

...to thi rd .parties. A popular feature of the Quicken financial software 
from intuit is the ' PIN vault, 1 which keeps a user 's various passwords 
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so the software can get financial information from other sites . 
Microsoft Corp. would like to eliminate passwords altogether, and its new 
vista operation system will allow consumers to create ^information cards 1 
that act as encrypted digital identifiers. This approach requires both... 

...of tokens has become popular. Tokens are small devices that generate a 

random six-digit password every, 60 seconds. Software is also available to 

analyze users typing habits in order to build biometric profiles that are 
used as identification for banking websites . 
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Bank of America Corp. has implemented a new feature to make online 
banking more secure.. The company allows users to select personal 
questions to be asked when they log in from computers not registered 
with the bank . Bank of America is only one of several banks that 
have added new security features to their web sites . Their actions are 
prompted by ever-increasing concerns about online fraud as well as new 
federal guidelines. Financial institutions kept their security features 
online to a minimum for years, even when Web-based attacks... 

...security proliferated. Things are changing, however. ING Group NV has 
decided to institute a new log - in process for its online site , ING 
Direct. Among other features, ING will allow customers to select an 
image from a menu of pictures to personalize their log - in pages, when a 

customer logs in from a computer recognized by the bank , the 
selected image appears on the log - in page. This makes it more difficult 
for hackers to create fake home pages and obtain personal information, 
u S Bancorp plans to use technology from Entrust incorporated that will 
track suspicious online-banking behavior. The banks represent only the 
latest financial institutions to provide additional security features. 
E*Trade Financial Corp., an online broker, has provided some of its 
customers with physical tokens that display frequently changing passwords 
. All financial institutions are taking security more seriously than in 
the past. 
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...transactions. Most identity theft results from thieves accessing paper 
statements and bills. According to the Bank of America (Boa), its online 
banking service results in less than 1 percent of the bank 's total number 
of fraud cases each year. Because customers can easily and quickly verify 
their account balances and transactions, online banking can actually 
protect against fraud, boa, along with several other leading financial 
institutions , recently introduced new security measures aimed at 
preventing unauthorized access of online banking services, boa's new 
Sitekey program provides extra password protection by adding secret 
questions and preselected images that only the authorized banking 
customer can answer when logging onto the system. Customers are also 
promised 'zero liability 1 for any unauthorized charges or losses if their 
onl ine banking. 

...a technique known as phishing. Thieves send e-mails that contain links 
to copycat web sites where unsuspecting victims enter their personal 
account information. Bank customers should never click on these links; 
instead, they should either enter their bank ' s URL manually or use a 
bookmark. There are several steps that online banking customers should 
take to safeguard their accounts. They should check their online account 
information on a regular basis, monitor their bank balances, and obtain 
free annual credit reports. They should also keep their antivirus programs 
updated, disable pop-ups, periodically change passwords , and use 
firewalls. 



12/3 ( K/5 (Item 4 from file: 256) 
DIALOG(R) Fi 1 e 256:TeclnfoSource 
(c) 2007 info. Sources Inc. All rts. reserv. 

00155265 DOCUMENT TYPE: Review 

PRODUCT NAMES: Linux (833916); HTML (835277); Phishing (812149); 
Milters (815845) 

TITLE: Solving Email Problems Using Sendmail Milters 

AUTHOR: Flynt, Marcia; Costal es, Bryan 

SOURCE: Linuxworld Magazine, v3 n6 p24(2) Jun 2005 

HOMEPAGE : http : //www . T i nuxworl d . com 
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Sendmail Milters, which are multi -threaded e-mail filtering programs, run 
parallel to sendmail and are capable of reviewing each aspect of each 
e-mail message, can guard users against phishing and spamming. Multiple 
Milters can run in parallel, with each addressing a different facet of 
e-mail. Milters are sharable among multiple sendmail processes, including 
those located on different machines and when such machines are in different 



...a web reference for an updating of account information. However, the 
actual link transports the user to a fraudulent web site that appears 
to be, for instance, a bank , but is actually a site desirous of gaining 
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access to a user 1 s login ( account, and password information for the 
purposes of stealing the money or identity of a user . Milters suppress 
scan by scanning all messages and searching for clickable web references. 
Milters also. . . 

...business, or network. Among described examples are archiving of mailing 
list messages into a database, authentication of accounts behind the 
curtain, study of MTA behavior, enforcement of policy in one place... 
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...AOL's Sender Policy Framework (SPF), and Yahoo !'s DomainKeys are 
proposed standards that would allow e-mail gateways to verify that 
messages purporting to be from a valid e-mail address (but which... 

...Microsoft, and Yahoo! all agreed to test each othersk standards. An 
agreed-upon standard would al low the spam to be weeded out by users . 
Today's phishing e-mails are highly sophisticated and difficult to discern 
as phi shing . The. . . 

...phishing attacks require targeted companies to handle very large spikes 
in call center volumes as customers call to describe a suspicion or ask 
the company why their account data is needed. Financial institutions 
also nave to pay the cost of any resultant fraud. Avivah Litan, VP and 
research director for... 

...communications. As for best practices, companies are advised to publish 
their mail server addresses, educate customers , establish online 
communication protocols, create a response plan immediately, be proactive 
in monitoring for phishers and fraud, and make the company a difficult 
target by deploying more robust authentication options, such as tokens 
that would create a new. password every minute, or with other described 
methods. 
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TITLE: How United Bankers' Bank Ensures Customer Authentication 

United Bankers Bank (UBB) , a correspondent bank that provides services 
to other banks , chose Digital Persona inc.'s u.are.u fingerprint 
recognition system to provide authentication security for its online 
services. It launched the system in November 2003. The bank considered 
several different types of authentication , including smart cards, 
tokens, and biometrics, before choosing u.are.u. Smart cards were 
eliminated. . . 

...because they are expensive, and both smart cards and tokens can be 
passed to other users . It decided on fingerprints as the best choice, 
users now log on to UBB's web site with a fingerprint, and do not 
need a password . ubb achieved buy-in for the system by purchasing one 
system for each targeted customer . It expected to have all of its 
targeted customers on the system by the end of March 2004. integration of 
the product into the bank f s IT system was straightforward. UBB did have 
to overcome some concerns from customers about how the bank was using 
the fingerprints. 
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Phishing, a scam using spoofed e-mail messages intended to obtain account 
information from banking customers , is a growing problem for banks and 
other financial institutions . Analysts estimate that five percent of 
phishing e-mails are successful in obtaining account information, in 
addition to financial losses from fraud, banks are concerned that 
phishing can damage their reputations. Banks are seeking ways to defend 
against phishing. Bank of America maintains a database of customers 
receiving e-mails, and monitors those accounts for fraud. Phishing hit 
several European banks first, before moving to the U.S. and other parts 
of the world. One phishing method which. hit Autralian bank westpac used 
portions of the bank 1 s real web site . Most of the scams have been 
traced to the Philippines, South Korea, Russia, and China... 

...also been attacked. Few true anti -phishing products exist. PassMark 
Security has developed a promising authentication system called PassMarks 
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that uses images rather passwords to authenticate banking sites . 
Solutionary, MessageLabs, and Symantec have e-mail monitoring software to 
check for security breaches. Digital... 
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MAS studying 'view-all 1 Net service 

SINGAPORE: MAS EXAMINING ONLINE FINANCIAL SERVICE 
The Straits Times (XBB) 30 May 2001 Sports p. 13 
Language: ENGLISH 

The Monetary Authority of Singapore (mas) is currently reviewing the 
possible launch of a new online financial service which will enable 

customers to view all his or her bank accounts from one website . it 
is learnt, MAS together with local banks , had a closed-door meeting on 24 
May 2001, to discuss how such a move can be made in Singapore. The new 
services, if launched, will avoid customers from having several 

passwords and identification numbers to view his or her accounts online 
from different banks . However, hjjrdles like privacy and financial 
security of customers will have to be addressed before the service can be 
launched here. A study by... 

... the middle of 2000 revealed that Singaporeans have accounts with an 
average of three local banks , which means that such a service will be 
beneficial to banking customers here. One possible way of implementing 
the service will be to obtain access to a customers other accounts and 
later downloading this to a central location. Then the customer will just 
have one password and identification number to view all his or her 
accounts. 
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Barclays plans 'one-stop 1 data site 

UK: NEW ONLINE CUSTOMER SERVICE FROM BARCLAYS 
Guardian (GN) 26 Feb 2001 p. 22 
Language: ENGLISH 

A new internet-based service that allows customers to manage all their 
financial accounts and assets, regardless of the provider, from one site 
is to be launched in the UK by Barclays. Although common in the US, it... 

... data aggregation services are launched in the UK. Security remains a 
major issue, however, as customers will need to provide the user names 
and passwords for all their accounts. The services are likely to spread, 
as e-fi nance software provider Corillian of the US says it is in talks with 
several UK banks to set up the services. 
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Singapore's Keppel Bank has launched Asia's first integrated internet 
banking and call centre solution that allows customers to speak 
directly to phone-banking officers using internet telephony technology. The 
pilot project will run till mid-1999 and around 1,000 customers should 
sign up for the service. The service will be fully launched by the second 

half of 1999. The solution cost the bank S$ 2.5 mn and was implemented 
by American Hewlett-Packard Company (HP), Adriot innovations Pte Ltd, 
Broadvision inc and Elcom Software Pte Ltd. Customers can log on to 
the bank 's web site to do various operations, including funds transfer 
between Keppel accounts and view transactions on their savings, current and 
MoneyMax accounts. One special feature is the immediate approval under the 

bank ' s Prestige Credit account., which is a personal revolving credit line 
with no annual or . . . 

... with interest being charged only when the credit line is activated and 
money withdrawn. The bank ' s customers get an internet Identification 
Code and an internet PIN to do online banking so as to ensure security. 



12/3.K/12 (Item 4 from file: 583) 

DIALOG (R) Fi 1 e 583:Gale Group Globalbase(TM) 
(c) 2002 The Gale Group. All rts. reserv. 

04340726 

KINDLE LAUNCHES BRANCHPOWER 

WORLD - KINDLE LAUNCHES BRANCHPOWER 
Banking Technology (BTY) 0 June 1991 p54 
ISSN: 0266-0865 

... can directly enter transactions. The system will handle bureau de 
change, cash analysis, account or client queries and supervisor 
referrals. It can also be connected to MICR readers. The system offers 
multi -lingual support facilites and in-built parameters allow it to be 
tailored. The Mid-Med Bank (Malta) has installed the system in 40 
branches and Kindle claimed it has two other multi - site contracts 
lined up in Europe. Kindle has also launched Bankmaster release 5, a PC LAN 



... market module, pop-up windows, new inquiry facilities, end of day 
interest recalculation and enforced password changing. 
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...SPECIFICATION make use of computer hardware and software to provide 
methods and systems for secure user authentication in electronic 
commerce transactions utilizing a next-time password solution in which 
each time a. . . 

...example, at the customer's pre-registered cell phone or email address by 
the financial institution , for example, via text message. The one-time 
value that is the next-time password is sent to the customer out of band 
of the Internet channel to either the customer 's email address or cell 
phone, when the customer returns to the financial institution 's 
site , the customer can enter the customer 's normal login 
credentials, such as the customer's username and password, in addition, 
the... 

...the customer to enter his or her username and password to be allowed 
into the financial institution 's site . in both cases, the customer 

must have previously registered a delivery address for the next-time 
password, such as an... 
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...SPECIFICATION not match, the client application prohibits access to any 
of its functionality. Otherwise, the application allows the user to 
move to the next stage, which is typically entry of a personal 
identification number ( PIN ). By embedding the user name within the 
client application an initial security check is provided... 

...the user's mobile device, where it is received. Once installed on the 
mobile, the client application is operable to act as a gateway to 
services provided by the bank . To access these services, the user has 
to firstly open the client application. Optionally, the user is asked 
to enter their name, which is compared with the... 
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Method and memory support for a program for controlling said method for 
securely conducting commercial and banking transactions in a 
telecommuniation and computer network 

Methode und Speichermedium fur ein Programm zur Kontrolle besagter Methode 
zur sicheren Durchfuhrung von kommerziellen und Banktransaktionen in 
einem Telekommunikations- und Computernetzwerk 

Methode et support de memoire pour un program de controle de ladite methode 
qui realise en securite des transactions commerciales et bancaires a 
t ravers des reseaux de telecommunication et d' ordinateurs 
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...SPECIFICATION reads the user data certificate in digital format and 
requests the user to type a second code for authorising the 
transaction. This second secret code , for instance of the common 
alphanumeric type, is provided to the user by the credit... 

...institution an authorisation to proceed with the funds transfer in 
favour of the electronic commerce site where the user decided to make 
the purchase. 

The credit institution compares the data pertaining to the amount 
of the expense of the transaction with the... 
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...SPECIFICATION password for unauthorized access to restricted resources 
controlled by another service provider. For example, a user may use the 
password "mypass" to access a site for reading sporting news, and also to 
access a separately-controlled site for managing the user 's bank 
account. An employee of the provider of the sporting news site knows the 
user's password for the sporting news site, and may attempt to access the 
user ' s bank account using the same password. Because the user uses 
the same password for both services, the sporting news employee can break 
in to the user 1 s bank account. 

Based on the foregoing, it is desirable to provide a way to allow 
users to avoid having to memorize multiple passwords without 
jeopardizing security. 

SUMMARY OF THE INVENTION 

A method and system are provided for authenticating users in a 
client-server system in a way that allows a user to sign-on to 
numerous servers using a different password for each server, while 
still only having to remember a single master password. 

According to. . . 

...SPECIFICATION password for unauthorized access to restricted resources 
controlled by another service provider. For example, a user may use the 
password "mypass" to access a site for reading sporting news, and also to 
access a separately-controlled site for managing the user 's bank 
account. An employee of the provider of the sporting news site knows 
the user ' s password for the sporting news site , and may attempt to 
access the user 's bank account using the same password. Because the 
user uses the same password for both services, the sporting news 
employee can break in to the user ' s bank account. 

Based on the foregoing, it is desirable to provide a way to allow 
users to avoid having to memorize multiple passwords without 
jeopardizing security. 

in US-A-5 684 950 a system and method for authenticating... 
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Technique for reducing RSA crypto variable storage. 

verfahren zum vermindern der fur eine RSA-verschlusselung benotigten 

veranderl i chen Spei cherkapazi tat . 
Methode pour reduire la memoire variable necessaire pour le chiffrage RSA. 
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...SPECIFICATION funds transfer (eft) is the name given to a system of 
directly debiting and crediting customer and service suppliers 1 
accounts. The accounts are held at the bank which is connected to... 

...connected terminals. The entry point at which financial transaction 
requests are initiated, such as a POS terminal or automated teller 
machine (ATM), is defined an EFT terminal. An institution's computer... 

...via an "intelligent" switch. The switch, which can be another HPC, 
establishes connections between HPCs. 

Users are normally provided with an embossed, magnetic stripe 
identification card or bank card containing, among other things, a 
primary account number (PAN). The institution at which the customer 
opens his account and which provides the user ' s bank card is 
referred to as the issuer. At an entry point to the system, 
information on the user 's bank card is read into the system and the 
user enters a secret quantity called the personal identification number 
(PIN) to prove his claimed identity... 
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WEB PAGE APPROVAL AND AUTHENTICATION APPLICATION INCORPORATING MULTI-FACTOR 

USER AUTHENTICATION COMPONENT 
APPROBATION DE PAGE WEB ET APPLICATION D 1 AUTHENTIFICATION INCORPORANT UN 

COMPOSANT D 1 AUTHENTI FICATION D ' UTILISATEUR A MULTI-FACTEURS 
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Full text word Count: 14879 

Full text Availability: 
Detailed Description 

Detailed Description 

authentic web site owners continue to struggle with mechanisms for 
authenticating visitors to their web sites , on the other hand, web 
site owners seeking to provide services to customers over the 
Internet, e.g., financial institutions and other e-cornmerce product 
and/or service vendors, have special and heightened concerns regarding... 

...via the internet, while securing customer information and preventing 
fraudulent web site use. Yet the two -factor authentication systems 
which are known rely upon customers to keep track of numerous 
passwords and authentication regimes, employ biometric hardware or 
carry cumbersome password generating devices (a/k/a pocket fobs) in 
order to interface with two -factor authentication systems. 

(0004] A need thus exists for an efficient way to verify that a network 
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SYSTEME ET PROCEDE DE SERVICES FINANCIERS ELECTRONIQUES ET SUPPORT 
D'ENREGISTREMENT D'UN PROGRAMME PERMETTANT DE METTRE EN OEUVRE CE 
PROCEDE, PROCEDE D' INTERFACE UTILISATEUR CORRESPONDANT 
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Claims 

Claim 

registered information by an automatic fill-in in the storing module 
and the previously registered user information to a web page of the 
bank . 

22. Cyber financial business system of claim 21, the method further 
comprising: log-in information including ID and the password for logging 
in the bank web pages ; personal information including the user 
address, contact number and resident registration number. 

financial information including a bank account number, password , 
authentication number and security number; and the user information 
that more than one information is included at least among URL 
information including URL address of web pages that the user 
visited. 

23. Cyber financial business system of claim 21, the user interface 
program i s : an . . . 
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Detailed Description 

12 is authenticated, although such questions can be posed at any time. 

[00651 Once the second step of authentication is passed, the third 
step of authentication provides a password passing routine between 
client 12, authentication system 20 and financial institution 14. while 
the session . . . 

...the sign-on password is unique to every instantiation of the 
authentication process by all users . 

[00661 A first part of the password passing routine has financial 
institution 14 sending a request to client 12 for a password in a web 
page . In one embodiment, instead of the user at client 12 entering 
the password, the password is provided by authentication system 20 to - 
20 client. . . 
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Detailed Description 

are reluctant to give banking or credit information over the internet, 
to a non-secure site . The solution using a tan is as follows. 

380 The customer accesses ABC Retailers' website using a browser as 
usual, and fills out a shopping basket, when given the total purchase 
amount for this transaction, the customer acquires access to his bank 
account also via the Web, perhaps using a second browser window. 

His bank site and. . . 

...Retailers site are open at the same time. After using his usual 
14 

secure access password and pin , two options are given to him. 

385 1. 'Do you wish to authorise a transaction?' 

2. 'Do you wish to cancel a transaction authorisation ?' 

After indicating his choice of the first option, the next screen comes 

up with the following fields to be filled in. 

1. Name of recipient... 
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Detailed Description 

Detailed Description 

... demand and supply planning in a network-based supply chain. Data 
access is provided from multiple simultaneous data sources utilizing a 
network for demand and supply planning in a network-based ... 2 illustrates 
an embodiment of a system for combined industry supply management between 
one or multiple manufacturers and one or many service providers and/or 
vendors and/or 
resellers; 
Figure 3 . . . 
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